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IN THE CLAIMS 

Please substitute the following amended claims as follows: 



1 . (Amended) A system comprising: 

a non-volatile data storage device, configure as one or more storage regions, to 
store one or more bytes of data; 

a program store communicatively coupled to the data storage device, the 
program store to store one or more processor-readable instructions to ascertain the 
validity of data stored in the non-volatile storage device and if invalid to replace the data 
with an earlier stored valid image of the data; and 

a processing unit coupled to the storage device and program store, to read and 
process the one or more instructions in the process store. 

1 2. (Amended) The system of claim 1 wherein the processing unit is configured to 

2 process the instructions in the program store as part of a start-up procedure. 

1 3. (Amended) The system of claim 1 wherein the data stored in the non-volatile 

2 data store is a Basic Input Output System (BIOS) for a processing device. 

1 4. The system of claim 1 wherein the processor-readable instructions in the 

2 program store ascertain the validity of the data stored in the non-volatile storage device 

3 on a region by region basis. 

1 5. The system of claim 1 wherein the earlier stored valid image of the data is stored 

2 in a location that cannot be modified without system authorization. 

1 6. The system of claim 5 wherein system authorization includes 
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employing a system interface to perform modifications to the data stored in the 
non-volatile data storage device. 

7. The system of claim 1 wherein ascertaining the validity of the data stored in the 
non-volatile storage device includes 

determining if the current data in the non-volatile storage device is different than 
the earlier stored valid image of the data. 

8. The system of claim 1 wherein ascertaining the validity of the data stored in the 
non-volatile storage device includes 

determining if an integrity metric corresponding to the current data in the non- 
volatile storage device is different than the same integrity metric corresponding to the 
earlier stored valid image of the data. 

9. The system of claim 1 further comprising: 

generating a copy the current data in the non-volatile storage device if an 
authorized application modifies the current data; and 

storing the copy as a valid image of the current data. 

1 0. (Amended) A method comprising: 

reading current content stored in a non-volatile storage device: 
determining if the current content has been modified without authorization; and 
replacing the current content with a previously stored valid image of the content if 
the current content is determined to have been modified without authorization. 

1 1 . (Amended) The method of claim 1 0 further comprising: 
reading the valid image of the previously stored content: and 

comparing the previously stored content to the current content to determine if the 
current content has been modified. 
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1 1 2. The method of claim 1 0 wherein determining If the current content has been 

2 modified without authorization includes 

3 comparing a previously stored checksum, corresponding to the valid image of the 

4 previously stored content, and the checksum corresponding to the current content. 

1 1 3. The method of claim 1 0 wherein determining if the current content has been 

2 modified without authorization includes 

3 comparing a previously stored cyclic redundancy check value, corresponding to 

4 the valid image of the previously stored content, and the cyclic redundancy check value 

5 corresponding to the current content. 

\ 1 14. The method of claim 1 0 wherein determining if the current content has been 

H 2 modified without authorization includes 

3 comparing a previously stored bit mask, corresponding to the valid image of 

4 previously stored content, and the corresponding bits of the current content. 

1 1 5. The method of claim 1 0 further comprising: 

2 storing a valid image of the current content for later use. 

1 1 6. The method of claim 1 0 wherein the content is read from the non-volatile storage 

2 device as part of a start-up procedure. 

1 17. (Amended) A method comprising: 

2 arranging a non-volatile storage device into one or more storage regions; 

3 generating an integrity metric corresponding to the-valid content stored in a first 

4 region of the non-volatile storage device; and 

5 storing the integrity metric to later determine if the content in the first region has 

6 been modified without authorization. 

1 18. The method of claim 1 7 further comprising: 
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comparing a previously stored integrity metric, corresponding to an earlier 
version of the content stored in the first region, to a newly calculated integrity metric 
corresponding to the current content stored in the first region to determine if an 
unauthorized modification has occurred. 

1 9. The method of claim 1 7 further comprising: 

replacing the first region with an earlier version of the content therein if it is 
determined that there was an unauthorized modification. 

20. (Amended) A method comprising: 

an-anging a non-volatile storage device into one or more storage regions; and 
comparing current content in a first region to an earlier stored image of the 

content in the first region; and 

replacing the current content stored In the first region with the previously stored 

content of the first region if it is determined that there was an unauthorized modification 

of the current content. 

21 . The method of claim 20 wherein the method is implemented as part of a start-up 
procedure. 

22. The method of claim 20 wherein the non-volatile device is arranged into one or 
more logical regions, each region of one or more bytes. 

23. A method comprising: 

arranging a non-volatile storage device into one or more storage regions; 
verifying that the content in the non-volatile storage device is valid; and 
encrypting the content in a first region by use a first encryption key to protect it 
from unauthorized access. 

24. The method of claim 23 further comprising: 

protecting the content of the first region from unauthorized modification by use of 
an integrity metric. 
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1 25. The method of claim 23 further comprising: 

2 protecting the content of the content of a second region with a second encryption 

3 key. 

1 26. (Amended) A machine-readable medium having one or more instructions for 

2 protecting content in a non-volatile storage device against unauthorized use, which 

3 when executed by a processor, causes the processor to perform operations comprising: 

4 reading current content stored in a non-volatile storage device; 

5 determining if the current content has been modified without authorization; and 

6 replacing the current content with a previously stored image of the content if the 

7 current content is determined to have been modified without authorization. 

\ 1 27. The machine-readable medium of claim 26 wherein determining if the current 

rV 2 content has been modified without authorization includes 

3 reading an image of previously stored content; and 

4 comparing the previously stored content to the current content to determine if the 

5 current content has been modified. 

1 28. The machine-readable medium of claim 26 wherein determining if the current 

2 content has been modified without authorization includes 

3 comparing a previously stored checksum corresponding to a valid image of 

4 previously stored content and the checksum corresponding to the current content. 

1 29. The machine-readable medium of claim 26 wherein determining if the current 

2 content has been modified without authorization includes 

3 comparing a previously stored cyclic redundancy check value corresponding to a 

4 valid image of previously stored content and the cyclic redundancy check value 

5 corresponding to the current content. 

1 30. The machine-readable medium of claim 26 wherein determining if the current 

2 content has been modified without authorization includes 
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3 comparing a previously stored bit mask corresponding to a valid image of 

V 4 previously stored content and the corresponding bits of the current content. 
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